On 1/7/2013 3:50 PM, Al Varnell wrote:
I'm sure this is due to the large increases over the past month or so of new
signatures being posted, but several ClamXav users are reporting seeing
update sessions similar to the following on a frequent basis.
Fri Dec 28 13:12:19 2012 -> ClamAV update process started at Fri Dec 28
13:12:19 2012
Fri Dec 28 13:12:19 2012 -> main.cvd is up to date (version: 54, sigs:
1044387, f-level: 60, builder: sven)
Fri Dec 28 13:12:20 2012 -> WARNING: getfile: daily-16088.cdiff not found on
remote server (IP: 194.8.197.22)
Fri Dec 28 13:12:20 2012 -> WARNING: getpatch: Can't download
daily-16088.cdiff from db.us.clamav.net
Fri Dec 28 13:12:20 2012 -> WARNING: getfile: daily-16088.cdiff not found on
remote server (IP: 78.46.84.244)
Fri Dec 28 13:12:20 2012 -> WARNING: getpatch: Can't download
daily-16088.cdiff from db.us.clamav.net
Fri Dec 28 13:12:21 2012 -> WARNING: getfile: daily-16088.cdiff not found on
remote server (IP: 128.177.8.248)
Fri Dec 28 13:12:21 2012 -> WARNING: getpatch: Can't download
daily-16088.cdiff from db.us.clamav.net
Fri Dec 28 13:12:21 2012 -> WARNING: Incremental update failed, trying to
download daily.cvd
Fri Dec 28 13:12:30 2012 -> Downloading daily.cvd [100%]
Fri Dec 28 13:12:32 2012 -> daily.cvd updated (version: 16171, sigs: 440336,
f-level: 63, builder: guitar)
Fri Dec 28 13:12:32 2012 -> bytecode.cld is up to date (version: 209, sigs:
40, f-level: 63, builder: neo)
Fri Dec 28 13:12:34 2012 -> Database updated (1484763 signatures) from
db.us.clamav.net (IP: 194.186.47.19)
So it would appear that you may be seeing a major impact on your mirror
network caused by the necessity to often download the entire daily.cvd. Not
a huge deal for the user (15 minutes to update in the above example), but I
thought you might want to know about it.
The only question I have is what is the limit on the number or size of the
.cdiff files? It would appear to be running at less than a days worth now.
Interesting. I took a look at my freshclam logs and I am seeing this
kind of thing about once a day as well. In my case, it seems to be a
temporary problem and fails to download the cvd as well complaining that
the mirrors are not synchronized. In both of the cases that I looked
at, it succeeded with the update on the next attempt.
Once it was apparently trying to download the wrong cdiff number. The
next attempt found a daily.cld version that was 1 number prior to the
number it was trying to download before (16392 rather than 16393) and
declared it to be up to date.
The other one I looked at closely failed all of the downloads and then
successfully downloaded the new cdiff (same number it was trying before)
on the next attempt.
I'm not running ClamXav, but the issues may be related.
--
Bowie
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
